CWS CWS WLAN Security Concepts 2

Question 1

Which attack exploits the 802.11 four-way handshake by capturing it and then running offline dictionary attacks?

Accepted Answer

WPA2-PSK brute force via captured handshake

Answer

Deauthentication flood

Answer

PMKID attack

Answer

Evil twin injection

Question 2

What is the primary purpose of 802.11w (Management Frame Protection)?

Accepted Answer

Protecting management frames from spoofing and replay attacks

Answer

Encrypting data frames with AES-256

Answer

Enabling fast BSS transition between APs

Answer

Increasing beacon interval to reduce overhead

Question 3

In WPA3-Enterprise, what minimum encryption suite is required compared to WPA2-Enterprise?

Accepted Answer

GCMP-128 as the minimum cipher

Answer

RC4 with 128-bit keys

Answer

TKIP with MIC

Answer

CCMP-64 as the minimum cipher

Question 4

A rogue AP is detected broadcasting the same SSID as the corporate network. What type of attack does this describe?

Accepted Answer

Evil twin attack

Answer

Karma attack

Answer

Deauth flood attack

Answer

MAC flooding attack

Question 5

Which EAP method uses a server-side certificate and a client-side certificate for mutual authentication?

Accepted Answer

EAP-TLS

Answer

EAP-MD5

Answer

PEAP

Answer

LEAP

Question 6

What does SAE (Simultaneous Authentication of Equals) replace in WPA3-Personal?

Accepted Answer

The PSK-based four-way handshake authentication exchange

Answer

TKIP key mixing

Answer

EAP outer identity protection

Answer

RADIUS shared secret negotiation

Question 7

Which wireless security mechanism prevents a compromised session key from exposing past or future sessions?

Accepted Answer

Perfect Forward Secrecy (PFS)

Answer

TKIP sequence counter

Answer

WEP IV rotation

Answer

SSID cloaking